Crisis Management Team: Who Belongs in the Room

A crisis management team is the group of people responsible for making decisions, coordinating communications, and protecting an organisation’s reputation when something goes wrong. The composition of that team, and the clarity of roles within it, determines whether a crisis is contained or compounds.

Most organisations don’t fail in a crisis because they lacked a plan. They fail because the wrong people were in the room, or the right people didn’t know what they were supposed to do when the pressure arrived.

Crisis management sits at the intersection of strategy, communications, and operational decision-making. If you want a broader view of how these disciplines connect, the PR and Communications hub covers the full landscape, from reputation management through to media relations and stakeholder strategy.

What Does a Crisis Management Team Actually Do?

The functional purpose of a crisis management team is to centralise decision-making authority during a period of elevated risk. Without that centralisation, organisations default to fragmented responses: the marketing team says one thing, legal says another, the CEO goes off-script, and the social media manager posts something that contradicts all three.

I’ve seen this play out in real time. Years ago, working on a major campaign for Vodafone, we hit a serious rights issue with a music licensing arrangement at the eleventh hour. The campaign was ready to go. Budget had been spent. Timelines were locked. The problem emerged late on a Friday evening. What happened next came down entirely to who was in the room and how quickly they could reach a decision. The client’s internal team had a clear chain of command. We had a clear escalation process on the agency side. Within hours we had a shared view of the problem, a decision to abandon the campaign, and the beginning of a new brief. Not comfortable, not cheap, but contained. The alternative, which was to argue about it across the weekend while the launch window closed, would have cost everyone far more.

That experience reinforced something I’ve carried since: the quality of your crisis response is almost entirely determined by the quality of your team structure before the crisis begins.

Who Should Be on the Crisis Management Team?

There is no universal answer, but there is a consistent logic. Every effective crisis management team needs representation across four functional areas: leadership and decision authority, communications, legal, and operations. The specific titles will vary by organisation. The functions cannot be absent.

Executive Lead

Someone with the authority to make binding decisions without needing to seek approval upward. In a large organisation this is typically the CEO or a designated deputy. In an agency context it’s usually the managing director or the account lead with explicit sign-off from the client. The executive lead is not necessarily the person who speaks publicly, but they are the person who decides what gets said and what gets done.

The mistake I see most often is organisations appointing a crisis lead who has nominal authority but not real authority. They chair meetings and circulate updates, but the actual decisions get made elsewhere, often by someone who isn’t in the room and doesn’t have full context. That gap between nominal and real authority is where crises escalate.

Communications Lead

The person responsible for all external and internal messaging. This is not the same as the person who drafts the press release. The communications lead owns the narrative strategy: what the organisation says, when it says it, through which channels, and in what sequence. They need to understand media dynamics, stakeholder sensitivities, and the difference between a statement that closes down a story and one that opens it up further.

In agency environments, this role often sits awkwardly. The client wants to control the message. The agency has the communications expertise. Getting that relationship right before a crisis, with clear protocols about who drafts, who approves, and who speaks, is essential. When it’s unclear, you get delays. When you get delays, you get speculation filling the void.

Legal Counsel

Legal needs to be in the room from the beginning, not brought in at the end to review a statement that’s already been agreed. The tension between legal caution and communications urgency is real, but it’s manageable when both functions are working together in real time. When legal is consulted sequentially rather than concurrently, you lose hours and you often end up with a statement that’s legally safe but communicatively useless.

The best legal advisors I’ve worked with understand that saying nothing is also a choice, and that choice carries its own risks. The worst treat every public statement as a potential liability and strip out anything that might actually help the organisation’s reputation. Neither extreme serves the business.

Operations Lead

Whoever is responsible for the practical execution of the response. In a product recall this is supply chain. In a data breach this is IT security. In a campaign crisis this might be the production or media team. The operations lead translates decisions into actions and reports back on what’s actually possible within what timeframe. Without this function in the room, crisis teams make commitments they can’t keep.

The Optional Fifth: External Advisor

Some organisations bring in an external crisis communications specialist. There are situations where this makes sense: when the internal team lacks experience with high-profile media situations, when there’s a conflict of interest within the internal team, or when the crisis is severe enough that an outside perspective is genuinely valuable. The risk is that external advisors slow down decision-making and sometimes prioritise their own visibility over the organisation’s interests. If you use one, define their role precisely.

How Should the Team Be Structured?

Structure matters because it determines how decisions get made under pressure. The two most common failure modes are too flat and too hierarchical.

Too flat means everyone has equal input and nothing gets decided quickly. I’ve sat in crisis rooms where three people needed to agree on every sentence of a statement. By the time the statement was approved, the news cycle had moved on and the statement was addressing a version of the story that no longer existed.

Too hierarchical means the person with authority is insulated from the people with information. Decisions get made on incomplete context because the operational and communications leads are reporting upward rather than contributing directly.

The structure that works is a small core team with a single decision-maker, supported by a wider group that feeds information in and executes decisions out. The core team should be no more than five people. The wider group can be larger, but they should have defined roles and defined reporting lines into the core.

When I was growing the team at iProspect from around 20 people to over 100, one of the things I was most deliberate about was ensuring that as the organisation scaled, decision-making authority remained clear. Large teams can move slowly not because they lack capability, but because nobody is certain who has the authority to commit. In a crisis, that ambiguity is catastrophic.

What Roles Need to Be Defined Before a Crisis Hits?

Six roles need to be defined in advance. Not job titles, but functional responsibilities that may or may not map neatly to existing org chart positions.

The first is the decision authority: who has the final say. The second is the spokesperson: who speaks externally, and under what circumstances. These two roles are often conflated and shouldn’t be. The CEO may have decision authority but may not be the right person to face a press conference.

The third is the internal communications lead: who manages messaging to employees, partners, and other internal stakeholders. Internal audiences are often neglected in crisis planning and they shouldn’t be. Employees who don’t know what’s happening will fill the gap with speculation, and that speculation will leak externally.

The fourth is the monitoring lead: who is tracking media coverage, social media, and stakeholder sentiment in real time and reporting back to the core team. Without this, the team is making decisions in an information vacuum.

The fifth is the documentation lead: who is keeping a clear record of what decisions were made, when, and by whom. This is critical for post-crisis review and, in some situations, for legal and regulatory purposes.

The sixth is the operations coordinator: who is tracking the execution of decisions and flagging when something isn’t happening as planned. Decisions without execution tracking create a false sense of progress.

How Do You Prepare a Crisis Management Team Before You Need It?

The single most useful thing an organisation can do is run a simulation. Not a tabletop exercise where people read through a scenario document and nod, but a live simulation where the team has to make decisions under time pressure with incomplete information. The gaps that emerge in a simulation are far cheaper to address than the gaps that emerge in a real event.

Having judged the Effie Awards, I’ve reviewed hundreds of campaigns and the work behind them. One thing that consistently differentiates strong organisations from weak ones is their capacity to operate under constraint. The teams that perform well in difficult circumstances are almost always the ones that have practised operating under difficult circumstances. Crisis preparedness is no different.

Beyond simulation, preparation involves three practical elements. First, a contact protocol: every team member needs to know how to reach every other team member at any hour, through multiple channels. Second, a pre-agreed escalation framework: what types of events trigger crisis team activation, and at what severity level. Third, a set of pre-approved holding statements that can be issued immediately while a fuller response is being prepared. Holding statements don’t commit the organisation to a position. They demonstrate that the organisation is aware of the situation and is taking it seriously.

Organisations that treat crisis preparation as a one-time document exercise rather than an ongoing capability-building process are consistently caught short. The document gets written, filed, and forgotten. The team that was supposed to use it has changed. The scenarios it was built around are no longer the relevant ones.

What Are the Most Common Structural Failures?

The first is the absent decision-maker. The person with authority is travelling, unavailable, or deliberately kept out of early conversations to give them deniability. This creates a vacuum that junior team members try to fill, often by defaulting to inaction or by making commitments they don’t have the authority to make.

The second is the legal veto. When legal counsel has an effective veto over all external communications, the organisation defaults to silence. Silence is read as guilt or incompetence by most external audiences. BCG’s research on shareholder value has consistently found that how companies respond to adverse events has a material effect on long-term value, not just the events themselves. Silence is a response. It’s just rarely the right one.

The third is the committee dynamic. When the crisis team is too large or lacks clear authority structures, it operates as a committee. Committees produce consensus, not decisions. In a crisis, consensus is often the enemy of speed, and speed is often the difference between containment and escalation.

The fourth is the communications-operations disconnect. The communications team agrees to a timeline for a response, and the operations team doesn’t know about it. Or the operations team resolves the underlying issue and doesn’t tell the communications team, who continue managing a crisis that has technically been resolved. I’ve seen this happen in large organisations where the two functions sit in different parts of the building and don’t have regular contact. In a crisis, that physical and organisational distance becomes a serious liability.

The fifth is treating every crisis the same. A data breach requires a different team configuration and a different response cadence than a product quality issue or a reputational attack on social media. Organisations with rigid, one-size-fits-all crisis structures often apply the wrong playbook to the wrong situation.

How Does Team Composition Change by Crisis Type?

The core structure remains consistent, but the functional expertise you pull in changes significantly depending on what you’re dealing with.

A reputational crisis driven by social media requires someone with deep platform knowledge and the ability to monitor and respond at speed. The dynamics of how a story spreads across social channels are different from how a story spreads through traditional media. Understanding platform-specific behaviour matters when you’re trying to assess whether a situation is escalating or burning out.

A regulatory or legal crisis shifts the balance toward legal counsel and government relations, with communications playing a supporting role rather than leading. The priority is managing the regulatory relationship, not managing the narrative.

An operational crisis, a product failure, a service outage, a supply chain problem, shifts the balance toward operations and customer service. Communications matters, but fixing the underlying problem matters more. Communicating well about a problem you haven’t fixed is a short-term play that usually backfires.

A financial crisis, a profit warning, a fraud allegation, an activist investor situation, requires investor relations and financial communications expertise that many general communications teams don’t have. The audiences, the regulatory context, and the appropriate communication channels are different from a consumer-facing crisis.

The implication is that crisis preparedness isn’t just about building one team. It’s about building a modular capability that can be configured differently depending on what you’re facing. That requires more upfront thinking, but it produces significantly better outcomes.

What Does Good Look Like After the Crisis?

The crisis management team’s work doesn’t end when the immediate situation is resolved. The post-crisis phase is where organisations either consolidate the learning or lose it.

A structured debrief within two weeks of the crisis is non-negotiable. Not a blame session, but a genuine assessment of what the team did well, what it did poorly, and what the structural gaps were. The documentation lead’s records are essential for this. Without a clear timeline of decisions and actions, the debrief becomes a set of competing recollections rather than an analysis of what actually happened.

The debrief should produce specific changes: to the team structure, to the escalation protocols, to the pre-approved holding statements, to the contact lists. If it produces a document that says “overall the team performed well and we will continue to monitor the situation,” it has failed.

Across 20 years managing complex client relationships and large teams, the organisations I’ve seen handle crises well share one characteristic: they treat every crisis as a data point in an ongoing capability-building exercise. They’re not trying to avoid ever having another crisis. They’re trying to get better at handling the ones that come.

For more on how communications strategy connects to broader business outcomes, the PR and Communications hub covers reputation management, media strategy, and stakeholder communications in depth.

About the Author

Keith Lacy is a marketing strategist and former agency CEO with 20+ years of experience across agency leadership, performance marketing, and commercial strategy. He writes The Marketing Juice to cut through the noise and share what works.

Frequently Asked Questions